Privacy Policy for Kenley Carpet Cleaners

Privacy Policy - Kenley Carpet Cleaners

This Privacy Policy explains how Kenley Carpet Cleaners collects, uses, stores, shares, and protects personal data. It applies to all Kenley Carpet Cleaners customers in area, including prospective customers, booked customers, and anyone who communicates with us in connection with our carpet cleaning services. We are committed to handling personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We aim to be transparent, fair, and secure in all data processing activities. This policy should help you understand what personal data we collect, why we collect it, the lawful basis we rely on, how long we keep it, who may process it on our behalf, and what rights you have over your information.

1. Personal Data We Collect

We collect only the personal data needed to provide and manage our services effectively. The information we may collect includes:

Identity information such as your name.
Contact information such as your address, email address, and telephone number.
Service information such as your booking details, service history, cleaning preferences, and notes about the work requested.
Payment-related information such as transaction records and payment confirmation details. We do not store full card details where payments are handled by secure third-party payment providers.
Communication records such as emails, messages, or call notes relating to enquiries, complaints, estimates, and appointments.
Property-related information where relevant to the service, such as access instructions or details about the carpeted areas to be cleaned.

We may also collect limited technical information if you interact with us through digital systems used for administration, scheduling, or invoicing. This may include basic device or log information necessary for security and system performance.

We do not intentionally collect special category data unless you choose to provide it and it is necessary for a specific purpose, such as sharing health-related access needs or allergy information relevant to service delivery. In such cases, we will only process that information where we have a valid legal reason to do so and appropriate safeguards are in place.

2. How We Use Personal Data

We use personal data to operate our business and deliver services to customers in area. The main purposes include:

Responding to enquiries and providing quotes or estimates.
Managing bookings, appointments, and customer records.
Delivering carpet cleaning services and related customer support.
Processing payments, refunds, and account administration.
Communicating service updates, changes, or follow-up information.
Handling complaints, queries, and customer feedback.
Meeting legal, tax, accounting, and insurance obligations.
Maintaining business security, fraud prevention, and service quality.

We will only use personal data for the purpose for which it was collected, unless we reasonably consider that we need to use it for another compatible purpose. If we need to use data for an unrelated purpose, we will explain the legal basis before doing so where required.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for processing personal data. Depending on the situation, Kenley Carpet Cleaners relies on one or more of the following lawful bases:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes taking bookings, delivering services, processing payment, and managing customer support related to those services.

Legal Obligation

We may process personal data to comply with laws that apply to our business, including tax, accounting, consumer protection, and record-keeping requirements.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests and those interests are not overridden by your rights and freedoms. This may include managing our operations, preventing fraud, improving service delivery, and maintaining accurate records. We balance our interests against your privacy rights before relying on this basis.

Consent

In some situations, we may rely on your consent, for example where optional marketing communications are involved or where you provide special category data for a specific purpose and consent is the appropriate basis. Where we rely on consent, you can withdraw it at any time.

4. Data Sharing and Processors

We may share personal data with trusted third parties who help us operate our business. These parties act as processors when they process personal data on our behalf and only according to our instructions. We take care to ensure that any processor used provides appropriate technical and organisational security measures.

Examples of processors or service providers may include:

Booking and scheduling providers used to manage appointments and service records.
Payment processors used to handle transactions securely.
IT and cloud storage providers used for secure document storage, email, and business administration.
Accounting and invoicing providers used for financial management and legal compliance.
Customer communication tools used to send service-related updates and confirmations.

We may also disclose data to professional advisers, insurers, regulators, law enforcement, or other authorities where required by law or where necessary to protect our rights, customers, staff, or business.

We do not sell personal data. If personal data is transferred outside the UK, we will ensure appropriate safeguards are in place, such as an adequacy decision or approved contractual protections, so your information remains protected.

5. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. The retention period depends on the type of data and the reason for processing it.

Customer and booking records are typically retained for the period necessary to manage the service relationship and resolve any follow-up issues.
Invoice, payment, and tax records are kept for the period required by law and standard accounting practice.
Communication records may be retained for a reasonable period to manage customer care, evidence agreements, and improve service.
Marketing records are retained until you withdraw consent or object, where applicable.

When personal data is no longer required, we will securely delete, anonymise, or archive it in line with our retention procedures. We regularly review data we hold to ensure it is not kept longer than necessary.

6. How We Protect Your Data

We use appropriate safeguards to protect personal data from loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures may include restricted access, secure storage, password protection, staff awareness measures, and the use of reputable service providers.

While no system can be guaranteed to be completely secure, we take data protection seriously and continuously review our procedures to reduce risk. If a personal data breach occurs that poses a risk to your rights and freedoms, we will take appropriate action in line with legal requirements.

7. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to certain conditions and exemptions. They include:

Right of access - you can request a copy of the personal data we hold about you.
Right to rectification - you can ask us to correct inaccurate or incomplete information.
Right to erasure - in some circumstances, you can ask us to delete your personal data.
Right to restrict processing - you can ask us to limit how we use your data in certain situations.
Right to data portability - you can ask for certain data to be provided in a structured, commonly used format.
Right to object - you can object to processing based on legitimate interests or to direct marketing.
Right to withdraw consent - where we rely on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond within the time limits required by law. We may need to verify your identity before acting on your request to protect your information.

8. Children’s Data

Our services are intended for adult customers and property-related service arrangements. We do not knowingly collect data from children unless it is incidentally provided in a service context and is necessary for legitimate operational reasons. Where such data is received, it will be handled carefully and only retained where appropriate and lawful.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. The most current version will apply to the personal data we process. We encourage customers in area to review this policy periodically so they remain informed about how their data is used.

10. How to Raise a Concern

If you are concerned about how your personal data has been handled, you have the right to raise the matter with the relevant data protection supervisory authority in the UK. We also encourage you to raise concerns directly so that we can address them promptly and fairly.

This policy is designed to ensure that Kenley Carpet Cleaners processes personal data lawfully, fairly, and transparently. We respect your privacy and are committed to protecting the personal information of every customer in area who uses our services.